Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File:                     Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier:          G9/QHuwzbG88p6BxGDgZ7MUaQlCtJ79+T0SLw29B7mY=
Subject key identifier:   BE:78:E9:E2:C2:7D:EA:B5:B0:91:03:61:8E:59:32:F8:87:A1:CD:D9
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer:       /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial:       019A50E404F6A422257DEA2F7B1D63732D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number:          169F
Signing time:             Tue 04 Nov 2025 22:01:51 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:51 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:51 +0000
Files and hashes:         1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=)
                          2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: iFy9nJmLnzwvDIOvFEKDft3vDFuoLAzY/B+d8FKe92I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e4:04:f6:a4:22:25:7d:ea:2f:7b:1d:63:73:2d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43c77b47363681378face466141d54cc88399cf5
        Validity
            Not Before: Nov  4 22:01:51 2025 GMT
            Not After : Nov  5 22:01:51 2025 GMT
        Subject: CN=be78e9e2c27deab5b09103618e5932f887a1cdd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:60:81:e1:2e:6c:c8:38:cb:f9:59:05:42:fa:
                    48:28:12:d8:8b:db:b0:66:f4:ad:91:20:57:68:ac:
                    32:30:85:95:7f:4e:3e:44:ee:53:38:ea:ad:19:06:
                    80:5b:c9:02:41:c7:19:c2:3c:e7:d0:fa:a5:49:2c:
                    f8:5e:9e:a6:b8:3f:b1:4d:cd:11:ae:ec:3e:ce:04:
                    3d:b1:19:a8:b8:8c:91:ae:fe:f6:b9:2e:46:7f:9e:
                    13:50:70:3f:38:12:74:ba:5a:90:a6:ec:21:9e:00:
                    49:9e:45:73:70:e8:70:80:dd:61:a0:49:f8:f6:c2:
                    a7:94:e1:6a:25:eb:33:da:1c:a8:be:e9:fb:5c:50:
                    e6:71:4f:76:3a:38:bf:65:04:18:71:38:6d:4c:8c:
                    16:18:e5:c7:71:55:06:de:aa:1f:a4:e1:10:5a:84:
                    2c:ff:33:f6:36:bf:98:1b:77:6e:6d:63:dc:0c:78:
                    b2:7b:5a:a2:f6:ce:a2:24:dd:a1:c6:93:4d:d1:23:
                    c9:30:f4:0c:f3:23:ec:f1:9a:a1:75:d4:34:82:a4:
                    a0:4b:91:4e:af:ea:13:5d:41:dd:8b:ed:1c:e1:22:
                    21:16:be:b0:37:12:bc:10:8c:78:25:66:2f:b1:a0:
                    86:35:25:db:f8:a4:00:fc:14:d1:32:66:ab:cf:76:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:E9:E2:C2:7D:EA:B5:B0:91:03:61:8E:59:32:F8:87:A1:CD:D9
            X509v3 Authority Key Identifier:
                keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:95:c1:6c:bb:d0:68:a7:2a:14:cf:9a:75:7f:48:fd:86:45:
         19:04:a9:2b:95:69:89:0c:ea:58:bc:1a:4c:1e:15:14:30:4c:
         40:88:e5:18:7f:8e:57:e8:9a:d4:b6:c3:69:09:63:5a:e5:c0:
         58:fe:bd:29:8b:d1:56:6e:17:b5:98:c5:8c:3f:f0:30:a8:b0:
         60:12:79:d0:9c:2a:d3:ef:90:4a:0d:2a:54:3d:d6:47:27:7d:
         7a:c1:23:09:c0:50:4f:a9:29:b4:7b:ae:c7:4e:7e:73:47:96:
         c4:99:bd:f8:4c:da:dd:b8:0f:76:0b:ce:c8:46:3e:13:2c:03:
         bc:21:6d:2b:65:be:58:91:98:bd:0f:bb:49:20:c2:98:02:bb:
         cb:27:ed:de:d6:04:c4:fa:ce:39:ab:1f:8b:0a:42:7d:b0:4b:
         11:86:14:44:6d:f5:0e:29:90:d8:43:c4:e3:3a:80:3a:13:17:
         f0:bc:21:c3:19:41:2a:b5:e1:b5:ef:05:48:26:a6:5d:b7:bd:
         d4:3c:25:a2:8e:0f:f9:b1:02:f3:1b:70:c1:86:04:6a:c9:ef:
         32:7f:42:5f:47:fc:d6:55:18:d7:94:33:0b:df:37:51:fa:c0:
         81:3c:9e:1d:df:84:9b:8f:39:22:ac:84:aa:b0:41:9a:55:31:
         d5:38:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:54 2025 by rpki-client